User driven ad-hoc permission granting for shared business information
AssigneeSAP Portals Israel Ltd.
InventorsYariv ZUR, Guy BAVLY
Life of this patent
Estimating the term…
Abstract
An apparatus and method for sharing information between a person having certain permissions, and another person or group of persons having insufficient permissions for the information. The apparatus and method enable a creator of a report to grant people or groups ad-hoc access permission to object types and object instances for which they have no a-priori permission. The method and apparatus enable the shared information to be up-to-date rather than static, and in addition enables logging and tracking of accesses to the information. The permission can have properties such as expiration date, context limitation, or further granting permission to a third party.
Claims15
A method for sharing information between users of a computerized system, the method comprising the steps of:
- receiving a description of a report comprising at least one field;
- receiving a recipient list of the report;
- a permission analysis step, comprising:
- determining at least one object type or object instance associated with the at least one field;
- determining at least one recipient from the recipient list that has insufficient permission for the at least one object type or object instance;
- providing a visual indication of the at least one field;
- receiving an approval for granting a permission to the recipient for the at least one field or for the at least one object type or object instance;
- associating the permission with the report;
- logging the permission;
- and
- presenting the report to the at least one recipient, including the at least one field.
An apparatus for sharing information between users of a computerized system, the users having different permissions, the apparatus comprising:
- user interface components for providing and receiving information to and from a user of the apparatus, the user creating or viewing a report;
- communication components for communicating with external systems;
- a permission verification component for determining an at least one object type or object instance for which a recipient of the report does not have sufficient permission;
- a storage device for storing the permission;
- and
- a permission logging component for logging the permission on the storage device.
Dependencies are inferred from the claim text.